Bulletins | CERT@VDE

SSA-794697 V1.0: Vulnerabilities in the Linux Kernel of the SIMATIC S7-1500 TM MFP V1.0

Titel

SSA-794697 V1.0: Vulnerabilities in the Linux Kernel of the SIMATIC S7-1500 TM MFP V1.0

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Text

Multiple vulnerabilities have been identified in the Linux Kernel of the SIMATIC S7-1500 TM MFP V1.0. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.

SSA-731916 V1.0: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices

Titel

SSA-731916 V1.0: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-731916.html

Text

The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by multiple vulnerabilities such as authenticated remote command injection, exposure of serial UART interface, and hard coded credentials (for UART login). Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-712929 V2.1 (Last Update: 2023-06-13): Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Prod...

Titel

SSA-712929 V2.1 (Last Update: 2023-06-13): Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-712929.html

Text

A vulnerability in the openSSL component (CVE-2022-0778, [0]) could allow an attacker to create a denial of service condition by providing specially crafted elliptic curve certificates to products that use a vulnerable version of openSSL. Siemens has released updates for several affected products and recommends to update to the latest ...

SSA-914026 V1.0: Local Code Execution Vulnerability in SIMATIC WinCC V7

Titel

SSA-914026 V1.0: Local Code Execution Vulnerability in SIMATIC WinCC V7

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-914026.html

Text

SIMATIC WinCC V7 is affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges, if a non-default installation path was chosen during installation. Siemens has released an update for SIMATIC WinCC and recommends to update to the latest version.

SSA-887249 V1.0: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices

Titel

SSA-887249 V1.0: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-887249.html

Text

Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to remote code execution. Siemens has released an update for POWER METER SICAM ...

SSA-851884 V1.1 (Last Update: 2023-06-13): Authentication Bypass Vulnerability in Mendix SAML Module

Titel

SSA-851884 V1.1 (Last Update: 2023-06-13): Authentication Bypass Vulnerability in Mendix SAML Module

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-851884.html

Text

The Mendix SAML module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version. Note: For compatibility reasons, fix versions are introduced ...

SSA-831302 V1.0: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP V1.0

Titel

SSA-831302 V1.0: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP V1.0

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-831302.html

Text

Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP V1.0. Siemens is preparing updates and recommends countermeasures for products where updates are not, or not yet available.

SSA-824231 V1.4 (Last Update: 2023-06-13): Unauthenticated Firmware Upload Vulnerability in Desigo PX Controllers

Titel

SSA-824231 V1.4 (Last Update: 2023-06-13): Unauthenticated Firmware Upload Vulnerability in Desigo PX Controllers

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-824231.html

Text

Several Desigo PXC/PXM devices contain a vulnerability that could allow unauthenticated remote attackers to upload malicious firmware without prior authentication. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-691715 V1.1 (Last Update: 2023-06-13): Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products

Titel

SSA-691715 V1.1 (Last Update: 2023-06-13): Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-691715.html

Text

A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released an update for SIMATIC WinCC and recommends to update to the latest version. Siemens is preparing further updates and recommends specific ...

SSA-508677 V1.0: Use of Obsolete Function Vulnerability in SIMATIC WinCC before V8

Titel

SSA-508677 V1.0: Use of Obsolete Function Vulnerability in SIMATIC WinCC before V8

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-508677.html

Text

Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption ...

SSA-988345 V1.1 (Last Update: 2023-06-13): Local Privilege Escalation Vulnerability in Xpedition Designer

Titel

SSA-988345 V1.1 (Last Update: 2023-06-13): Local Privilege Escalation Vulnerability in Xpedition Designer

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-988345.html

Text

A vulnerability in Xpedition Designer could allow an attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-975766 V1.0: Open Design Alliance Drawings SDK Vulnerability in Solid Edge

Titel

SSA-975766 V1.0: Open Design Alliance Drawings SDK Vulnerability in Solid Edge

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-975766.html

Text

Solid Edge is affected by a file parsing vulnerability in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released ...

SSA-968170 V1.0: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products

Titel

SSA-968170 V1.0: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products

Veröffentlicht

13. Juni 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-968170.html

Text

SIMATIC STEP 7 and PCS 7 contain a database management system that could allow remote users with low privileges to use embedded functions of the database (local or in a network share) that have impact on the server. An attacker with network access to the server network could leverage these ...

Mai 2023

SSA-382653 V1.3 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in Industrial Products

Titel

SSA-382653 V1.3 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in Industrial Products

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-382653.html

Text

Affected SIMATIC firmware contains multiple vulnerabilities that could allow an unauthenticated attacker to perform a denial of service attack under certain conditions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates ...

SSA-349422 V2.0 (Last Update: 2023-05-09): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Titel

SSA-349422 V2.0 (Last Update: 2023-05-09): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-349422.html

Text

A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are ...

SSA-325383 V1.0: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1

Titel

SSA-325383 V1.0: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-325383.html

Text

SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.

SSA-478960 V1.4 (Last Update: 2023-05-09): Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Titel

SSA-478960 V1.4 (Last Update: 2023-05-09): Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-478960.html

Text

The web server login page of affected products does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.. Siemens has released updates for several affected products and recommends to update to the latest versions. ...

SSA-552874 V1.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in SIPROTEC 5 Devices

Titel

SSA-552874 V1.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in SIPROTEC 5 Devices

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-552874.html

Text

Devices of the SIPROTEC 5 family contain a vulnerability related to secure client-initiated renegotiation. This could allow an unauthenticated attacker to cause a denial of service condition for the duration of the attack. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens ...

SSA-516174 V1.0: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D

Titel

SSA-516174 V1.0: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-516174.html

Text

The SCALANCE W1750D device is affected by Wi-Fi encryption bypass vulnerabilities (“Framing Frames”) that could allow an attacker to disclose sensitive information or to steal the victims session. Siemens is preparing updates and recommends countermeasures for products where updates are not, or not yet available.

SSA-322980 V1.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in SIPROTEC 5 Devices

Titel

SSA-322980 V1.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in SIPROTEC 5 Devices

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-322980.html

Text

SIPROTEC 5 devices contain a null pointer dereference vulnerability in the web service. This could allow an attacker to send unauthenticated maliciously crafted http request that could cause denial of service condition of the device. Siemens has released updates for several affected products and recommends to update to the latest ...

SSA-480230 V2.7 (Last Update: 2023-05-09): Denial of Service Vulnerability in Webserver of Industrial Products

Titel

SSA-480230 V2.7 (Last Update: 2023-05-09): Denial of Service Vulnerability in Webserver of Industrial Products

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-480230.html

Text

A vulnerability in the affected devices could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial of service attack. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products ...

SSA-592007 V2.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in Industrial Products

Titel

SSA-592007 V2.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in Industrial Products

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-592007.html

Text

Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens ...

SSA-566905 V1.1 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products

Titel

SSA-566905 V1.1 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-566905.html

Text

Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and ...

SSA-555292 V1.0: Security Vulnerabilities Fixed in SIMATIC Cloud Connect 7 V2.1

Titel

SSA-555292 V1.0: Security Vulnerabilities Fixed in SIMATIC Cloud Connect 7 V2.1

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-555292.html

Text

SIMATIC Cloud Connect 7 contains multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released updates for the affected products and recommends to update to the latest versions.